Call Manager (Cisco) - vulnerabilities (CVEs)
18 CVEs, 0 in the last 30 days, 41 known versions, newest CVE from 2007-10-16. Vendor: Cisco.
CVEs of Call Manager
- CVE-2007-5468 - CVSS 5 (medium), 2007-10-16: Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to…
- CVE-2007-4634 - CVSS 9.3 (critical), 2007-08-31: Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before…
- CVE-2007-4633 - CVSS 4.3 (medium), 2007-08-31: Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5,…
- CVE-2007-2832 - CVSS 4.3 (medium), 2007-05-24: Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2,…
- CVE-2007-1467 - CVSS 3.5 (low), 2007-03-16: Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client,…
- CVE-2006-3109 - CVSS 4.3 (medium), 2006-06-21: Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows…
- CVE-2006-0367 - CVSS 6.5 (medium), 2006-01-22: Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote…
- CVE-2006-0368 - CVSS 7.8 (high), 2006-01-22: Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of…
- CVE-2005-2244 - CVSS 5 (medium), 2005-07-12: The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows…
- CVE-2005-2243 - CVSS 5 (medium), 2005-07-12: Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi…
- CVE-2005-2241 - CVSS 5 (medium), 2005-07-12: Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime…
- CVE-2005-0356 - CVSS 5 (medium), 2005-05-31: Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a…
- CVE-2004-0079 - CVSS 7.5 (high), 2004-11-23: The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a…
- CVE-2004-0112 - CVSS 5 (medium), 2004-11-23: The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets…
- CVE-2004-0081 - CVSS 5 (medium), 2004-11-23: OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as…
- CVE-2004-1760 - CVSS 10 (critical), 2004-01-21: The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication,…
- CVE-2004-1759 - CVSS 5 (medium), 2004-01-21: Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU…
- CVE-2002-0505 - CVSS 5 (medium), 2002-08-12: Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause…
